Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/QbJ9HhS1TsaL_Ianrq-blk3i-e8.roa
File: QbJ9HhS1TsaL_Ianrq-blk3i-e8.roa (raw, json)
Hash identifier: PxXDoSdLkffaC9IKS7oRQ/r4NfZL/uptjGWPczUZ6lg=
Subject key identifier: 41:B2:7D:1E:14:B5:4E:C6:8B:FC:86:A7:AE:AF:9B:96:4D:E2:F9:EF
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 148A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/QbJ9HhS1TsaL_Ianrq-blk3i-e8.roa
Signing time: Sun 14 Apr 2024 17:53:17 +0000
ROA not before: Sun 14 Apr 2024 17:53:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5258 (0x148a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 14 17:53:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=41B27D1E14B54EC68BFC86A7AEAF9B964DE2F9EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9d:dc:bb:e9:69:31:08:60:65:c1:75:80:71:
34:ed:b8:e8:71:9f:b2:57:72:81:77:db:44:ef:14:
fd:64:69:7a:0e:c0:af:15:28:dd:92:bd:a2:dc:71:
6d:d8:89:20:28:72:51:87:91:96:00:0d:fc:19:d6:
0f:4a:a2:9f:1e:50:92:e0:b1:60:22:16:48:99:b8:
0a:46:e3:4c:e7:c7:79:3d:6d:8a:b0:97:8d:fd:34:
7e:32:1d:c1:16:60:7b:99:77:9f:91:2c:65:8b:71:
57:d3:b9:44:c6:52:8c:9a:9f:53:d1:b7:5c:3b:27:
88:00:ed:14:0a:95:bc:9a:64:3a:d8:1d:b3:24:97:
f0:01:da:5b:66:e3:a6:be:c3:68:12:be:4b:77:e7:
97:af:e3:ce:cf:70:c5:8d:6d:8d:36:16:62:64:40:
1d:19:dd:7e:4d:76:0e:49:e7:34:da:19:fc:1b:1b:
ca:7f:5c:2d:4b:8a:37:3b:38:cd:7e:37:6e:ac:d5:
df:ab:bf:17:fe:63:63:be:e6:c1:0c:30:6a:f6:ba:
ca:05:52:9e:1a:61:22:5b:68:14:30:4f:c0:8a:9d:
d0:a7:9d:a3:a9:67:1c:f9:ac:c9:f4:e7:07:b3:3e:
b6:d5:4f:97:1b:f8:ac:e9:b4:bc:0e:7b:e6:92:64:
53:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B2:7D:1E:14:B5:4E:C6:8B:FC:86:A7:AE:AF:9B:96:4D:E2:F9:EF
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/QbJ9HhS1TsaL_Ianrq-blk3i-e8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
09:f3:2c:97:9a:12:83:9e:43:be:b2:10:e2:0e:68:76:55:12:
3f:4f:58:39:15:97:87:58:d7:51:a9:23:57:96:e2:cc:10:f7:
18:62:ff:5a:0c:d2:e3:0d:6c:b6:3a:09:fd:cc:ee:50:2e:17:
63:25:e1:b1:9a:d3:c7:5a:8c:25:be:71:45:fa:66:93:50:bd:
b0:4a:bd:03:64:e5:70:dc:fa:35:23:fd:08:cd:89:96:e9:d2:
de:7a:85:6c:c5:f1:15:7f:a6:53:12:51:12:f2:83:4b:38:45:
c2:9a:34:90:ce:20:de:11:cc:98:65:03:f3:3a:b3:2d:94:8d:
19:30:17:e0:96:f5:73:2e:fa:d1:3f:30:6d:55:c5:6f:6b:33:
98:d9:d6:5c:4c:53:87:9a:8e:30:c3:60:af:09:04:31:4f:84:
32:2d:d1:c2:1c:68:da:09:9e:78:dd:1a:af:af:2b:5b:97:b3:
8f:f1:b3:7e:ed:69:0c:4e:36:b3:e0:0f:8c:6d:f7:01:2c:32:
d7:3d:f0:7e:57:9a:d5:54:e5:35:fa:8e:87:f3:92:8d:99:69:
d0:ed:dd:05:5f:99:46:2f:17:ab:9e:1f:2a:a0:89:5b:d3:09:
35:2a:0a:0a:97:c0:61:bf:94:d9:c7:8a:01:60:bb:6f:42:5b:
16:37:68:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:28:51 2025 by rpki-client